VULNERABILITY INTELLIGENCE
CVE-2026-68518
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-08-17
Last modified2026-10-23
Description
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize_mustache_dict() in glances/actions.py sanitizes individual Mustache values before chevron.render(), allowing adjacent unescaped Mustache variables to reconstruct shell operators that secure_popen() executes when attacker-controlled process or container fields are rendered by an administrator-configured action template. This issue is fixed in 4.5.6.
Weakness classification
- security-advisories@github.com: CWE-78